• I have a question on what is already done regarding form security?

    Did you include client-side and the server-side form validation?

    Or do you use a PHP built-in function to sanitize the input?

    I saw that you use htmlspecialchars() to sanitize output to protect against XSS. And also a nonce to identify the form.

    I am asking to ensure we offer no insecure website to our clients using this plugin. If needed we could also support you with that.

    • This topic was modified 1 year, 8 months ago by lphoffmann.
  • The topic ‘Security’ is closed to new replies.